RDP to Server without Requesting Login Details

scottalanmiller

Windows 10 to Server 2012 R2 and/or Server 2016, all on AD currently. We used to be able to RDP and it would just log in using the signed in creds. Now it asks every time (probably after that recent update change.) This is probably really simple but just a little hard to Google for the right term.

Anyone know how to make it just pass the local creds through so that the users go straight into the machine instead of needing to log in again once connected via RDP?

Danp

Have you reviewed this from Microsoft?

Obsolesce

It doesn't for me and I'm fully updated.

Once you RDP in and save credentials, it won't ask you anymore.

krisleslie

I switched to the RDP Manager and I get more options exposed to help. Rarely having that issue anymore after patching.

momurda

Just save credentials or use rdcman, where you can setup groups and have different logins per group/server

wrx7m

If you try to save credentials in Windows 10, it will work the first time, but subsequent times, it will fail with an error. To overcome this, I had to run this (not as admin) on the Windows 10 client while the user is logged in.

reg.exe Add "HKCU\Software\Microsoft\Terminal Server Client" /V "RDGClientTransport" /T REG_DWORD /D "1"

wrx7m

@wrx7m said in RDP to Server without Requesting Login Details:

reg.exe Add "HKCU\Software\Microsoft\Terminal Server Client" /V "RDGClientTransport" /T REG_DWORD /D "1"

This is the error I was getting on the Windows 10 clients -
https://partnersupport.microsoft.com/en-us/par_clientsol/forum/par_win/win10-pro-rdc-your-computer-cant-connect-to-the/a63b3647-a7ed-4cb7-9245-f9b9791e9bc9

dbeato

Yes, you can use credential delegation:

Under Computer Configuration\Policies\Administrative Templates\System\Credential Delegation

bbigford

@dbeato said in RDP to Server without Requesting Login Details:

Yes, you can use credential delegation:

Under Computer Configuration\Policies\Administrative Templates\System\Credential Delegation

Likely the culprit. Some environments this is required to be enabled; inconvenient though.

scottalanmiller

@bbigford said in RDP to Server without Requesting Login Details:

@dbeato said in RDP to Server without Requesting Login Details:

Yes, you can use credential delegation:

Under Computer Configuration\Policies\Administrative Templates\System\Credential Delegation

Likely the culprit. Some environments this is required to be enabled; inconvenient though.

This seems to work for machines in AD. Any idea how to find this setting for machines not in AD?

dbeato

@scottalanmiller said in RDP to Server without Requesting Login Details:

@bbigford said in RDP to Server without Requesting Login Details:

@dbeato said in RDP to Server without Requesting Login Details:

Yes, you can use credential delegation:

Under Computer Configuration\Policies\Administrative Templates\System\Credential Delegation

Likely the culprit. Some environments this is required to be enabled; inconvenient though.

This seems to work for machines in AD. Any idea how to find this setting for machines not in AD?

Here is the registry
https://getadmx.com/?Category=Windows_10_2016&Policy=Microsoft.Policies.CredentialsSSP::AllowSavedCredentials

Registry Hive	HKEY_LOCAL_MACHINE
Registry Path	Software\Policies\Microsoft\Windows\CredentialsDelegation\AllowSavedCredentials
Value Name	{number}
Value Type	REG_SZ
Default Value	
 Concatenate OS defaults with input above
Registry Hive	HKEY_LOCAL_MACHINE
Registry Path	Software\Policies\Microsoft\Windows\CredentialsDelegation
Value Name	ConcatenateDefaults_AllowSaved
Value Type	REG_DWORD
Default Value	1
True Value	1
False Value	0

scottalanmiller

Thanks.